Search results

fix(misconf): support ENCRYPTED_ONLY as valid SSL/TLS mode in AVD-GCP-0015

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

Bug

#9999 In aquasecurity/trivy;

· nikpivkin opened on Dec 31, 2025

feat(maven): add <code>mirrors</code> support for settings.xml files

help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

Status: Open.

#9989 In aquasecurity/trivy;

· DmitriyLewen opened on Dec 25, 2025

bug: during <code>inspectConfig</code>, the OS information obtained from the layers is non-deterministic or missed

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

Status: Open.

Bug

#9982 In aquasecurity/trivy;

· DmitriyLewen opened on Dec 23, 2025

fix(misconf): safely parse rotation_period in google_kms_crypto_key

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

Bug

#9979 In aquasecurity/trivy;

· nikpivkin opened on Dec 23, 2025

·  

v0.69.0

bug(license): Trivy validates SPDX licenses using the SPDX license list, but it does not apply the canonical values from that list

kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.

scan/licenseIssues relating to license scanningIssues relating to license scanning

Status: Open.

Bug

#9965 In aquasecurity/trivy;

· DmitriyLewen opened on Dec 19, 2025

·  

v0.69.0

feat(misconf): check ephemeral containers in KSV022 and KSV106

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

Feature

#9936 In aquasecurity/trivy;

· nikpivkin opened on Dec 12, 2025

feat(java): Support for Maven 4 settings.xml

help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

target/filesystemIssues relating to filesystem scanningIssues relating to filesystem scanning

Status: Open.

Feature

#9908 In aquasecurity/trivy;

· knqyf263 opened on Dec 9, 2025

misconf: Revise KSV-0022 to allow valid capabilities

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

Task

#9844 In aquasecurity/trivy;

· nikpivkin opened on Nov 25, 2025

enhancement(cyclonedx): use <code>component.evidence.occurrences.location</code> for filapaths and linenumber

help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.

Status: Open.

Feature

#9832 In aquasecurity/trivy;

· DmitriyLewen opened on Nov 20, 2025

fix(checks): Improve the detection logic for AVD-KSV-0050

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

Bug

#9826 In aquasecurity/trivy;

· simar7 opened on Nov 20, 2025

feat(misconf): add support for azurerm_linux_web_app and azurerm_windows_web_app

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

scan/misconfigurationIssues relating to misconfiguration scanningIssues relating to misconfiguration scanning

Status: Open.

Feature

#9820 In aquasecurity/trivy;

· nikpivkin opened on Nov 18, 2025

·  

v0.69.0

bug(cyclonedx): duplicates in dependsOn array when scanned SBOM contains components with same name + version but different bomRef/SPDXID.

Status: Open.

Bug

#9815 In aquasecurity/trivy;

· DmitriyLewen opened on Nov 18, 2025